Lucene search
PRIOn knowledge basePRION:CVE-2017-8038HistoryNov 27, 2017 - 10:29 a.m.
Design/Logic Flaw
2017-11-2710:29:00
PRIOn knowledge base
www.prio-n.com
4
In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| credhub-release | eq | 1.1.0 |
References
Related
osv
osv
CVE-2017-8038
2017-11-27 10:29:00
cloudfoundry
cloudfoundry
CVE-2017-8038: Credentials readable from CredHub endpoint | Cloud Foundry
2017-07-31 00:00:00
nvd
nvd
CVE-2017-8038
2017-11-27 10:29:00
cve
cve
CVE-2017-8038
2017-11-27 10:29:00
cvelist
cvelist
CVE-2017-8038
2017-11-27 10:00:00